Cryptographic Concepts
Summary
PDF p.48Cryptography, meaning "secret writing," is the practice of securing information by encoding it. Unlike security through obscurity, cryptography ensures that even if the existence and location of the secret are known, it cannot be understood without the means to decode it. Key terms include plaintext, ciphertext, algorithm, and cryptanalysis. Main actors in cryptographic discussions are Alice (sender), Bob (recipient), and Mallory (attacker). Cryptographic algorithms include hashing, symmetric, and asymmetric encryption, each ensuring confidentiality, integrity, and non-repudiation.
In plain words
Supplementary — not from your PDFCryptography scrambles information so only the right people can read it. It doesn't depend on hiding where the secret is: even if everyone knows it's there, they can't read it without the key.
Detailed explanation
PDF p.48-
Cryptography
- Definition: The art of making information secure by encoding it.
- Contrast: Opposite of security through obscurity, which relies on hiding information.
- Importance: Ensures that even if the secret's existence and location are known, it remains undecipherable without the decoding means.
-
Terminology
- Plaintext (or cleartext): An unencrypted message.
- Ciphertext: An encrypted message.
- Algorithm: The process used to encrypt and decrypt a message.
- Cryptanalysis: The art of cracking cryptographic systems.
-
Actors in Cryptography
- Alice: The sender of a genuine message.
- Bob: The intended recipient of the message.
- Mallory: A malicious attacker attempting to subvert the message.
-
Types of Cryptographic Algorithms
- Hashing Algorithms: Ensure data integrity by producing a fixed-size hash value from input data.
- Symmetric Encryption: Uses the same key for both encryption and decryption.
- Asymmetric Encryption: Uses a pair of keys (public and private) for encryption and decryption.
Important terms
taken from the text above- Cryptography
- The art of making information secure by encoding it.
- Contrast
- Opposite of security through obscurity, which relies on hiding information.
- Plaintext (or cleartext)
- An unencrypted message.
- Ciphertext
- An encrypted message.
- Algorithm
- The process used to encrypt and decrypt a message.
- Cryptanalysis
- The art of cracking cryptographic systems.
- Alice
- The sender of a genuine message.
- Bob
- The intended recipient of the message.
- Mallory
- A malicious attacker attempting to subvert the message.
- Hashing Algorithms
- Ensure data integrity by producing a fixed-size hash value from input data.
- Symmetric Encryption
- Uses the same key for both encryption and decryption.
- Asymmetric Encryption
- Uses a pair of keys (public and private) for encryption and decryption.
Examples & real-world scenarios
Supplementary — not from your PDF- Plaintext 'meet at noon' becomes unreadable ciphertext after encryption.
- Hashing protects integrity; symmetric and asymmetric encryption protect confidentiality.
- Alice sends, Bob receives, and Mallory is the attacker in textbook examples.
Scenario
A company 'protects' a password file by naming it holiday-photos.zip. That's security through obscurity. Encrypting the file is cryptography: it stays safe even when found.
Common mistakes
Supplementary — not from your PDF- Treating obscurity (hiding) as if it were encryption.
- Assuming hashing hides data. It proves integrity and can't be reversed, but it isn't encryption.
Practical skills
Supplementary — not from your PDF- Pick hashing, symmetric or asymmetric crypto for a given goal.
What I should remember
Key Points PDF p.48-
Cryptography
- Secure Encoding: Protects information by encoding it.
- Opposite of Obscurity: Does not rely on hiding information.
-
Terminology
- Plaintext: Unencrypted message.
- Ciphertext: Encrypted message.
- Algorithm: Encryption/decryption process.
- Cryptanalysis: Cracking cryptographic systems.
-
Actors
- Alice: Sender.
- Bob: Recipient.
- Mallory: Attacker.
-
Cryptographic Algorithms
- Hashing: Ensures data integrity.
- Symmetric Encryption: Same key for encryption/decryption.
- Asymmetric Encryption: Public and private keys.